This job has expired, please see additional jobs below
Head of Global Application and Infrastructure Assurance
INVESCO Asset Management
Atlanta, GA, United States
Job Details - this job has expired, please see similar jobs below
Description
Invesco is a leading global asset management firm with more than $937B* in assets under management. We provide our retail and institutional clients a diverse and comprehensive range of investment capabilities to help people get more out of life. Invesco is publicly traded on the New York Stock Exchange (IVZ) and has about 7,000 employees in over 20 countries.
(*As of December 31, 2017)
Job Purpose (Job Summary):
Head of Global Application and Infrastructure Security will work closely with technology and application teams to build security into all phases of the software and systems development/maintenance life cycle. In this role, you will partner with IT leadership to provide assurance of error-free development practices and ensure the applications and infrastructure are securely designed, architected, and implemented. The role will be based in the Atlanta, GA HQ.
Key Responsibilities / Duties:
• The incumbent will be responsible for the Security Architecture, Security Engineering, Application Security, Vulnerability Assessment and Penetration Testing capabilities across the Invesco application and infrastructure portfolio:
• Security Architecture:
• Research, design and advocate new technologies, architectures and products that support the security control infrastructure requirements for the organization, business partners and vendors.
• Collaborate with peer IT personnel to ensure required Information Security solutions are in place throughout all IT systems and applications to mitigate identified risks to an acceptable level in alignment with business objectives.
• Security Engineering:
• Manage the development, deployment and execution of controls that enable the firm to securely transact globally with IVZ clients.
• Support the delivery of information technology solutions that satisfy business requirements and prevent misuse and malicious behaviors.
• Application Security:
• Align the development lifecycle with the Application Security program and continuously improve the Secure Development Lifecycle.
• Implement processes and applicable security testing tools within the Software Development Life Cycle to ensure security is integrated in the delivery pipeline.
• Vulnerability Assessment & Penetration Testing:
• Proactively identify and facilitate remediation of security exposures and vulnerabilities.
• Collaboratively develop and test applications and website detection controls and incident response plans.
Qualifications
Work Experience / Knowledge:
• 10+ years Information Security experience with a combination of the above referenced key responsibility domains.
• 10+ years personnel management experience.
• Experience in development and management of Information Security programs and processes.
• Building and managing relationships at all levels within the organization.
• Working in large/global corporate environments involving multiple lines of business.
• Expert problem-solving skills with the ability to solve problems with unknown parameters.
• Financial services and project management experience highly desired.
• Effective presentation skills for technical and non-technical groups at all levels within the organization.
Skills / Other Personal Attributes Required:
• Proven ability to effectively sell ideas and build consensus at all levels within the organization.
• Possesses diplomacy and cooperative style necessary to interface with all personalities and across all functional disciplines.
• Track record of success in planning and implementing large projects.
• Strong analytical skills with ability to define, collect, analyze data, establish facts, draw valid conclusions, and make fact-based decisions.
• Strong communicator (written and verbal) and listener.
• Motivated self-starter with ability to work independently and remotely with limited supervision.
• Willingness to travel both domestically and internationally.
Formal Education:(minimum requirement to perform job duties)
• A Bachelor’s Degree in Management Information Systems or Computer Science is preferred or commensurate relevant work experience.
• CISSP, CISM, GIAC or other industry certification required.
FLSA (US Only):Nonexempt
The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time.
Invesco's culture of inclusivity and its commitment to diversity in the workplace are demonstrated through our people practices. We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, creed, color, religion, sex, gender, gender identity, sexual orientation, marital status, national origin, citizenship status, disability, age, or veteran status. Our equal opportunity employment efforts comply with all applicable U.S. state and federal laws governing non-discrimination in employment.